Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File:                     HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier:          NQR1dIgb8D0NrImGeWuo/oJWVKWzf7dI+XYwxQ4zsdk=
Subject key identifier:   02:80:82:78:9E:49:3E:1D:38:EA:3A:4E:A9:68:C3:C3:C4:35:0E:0F
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer:       /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial:       01962E617C1FF21A92531DEDDD7F8F3F1E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: kfQJYaEE5eC8jgy9vCp/Cmkg41nQ/Aov9atwSwFj1bE=)
                          2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
                          3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7c:1f:f2:1a:92:53:1d:ed:dd:7f:8f:3f:1e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=028082789e493e1d38ea3a4ea968c3c3c4350e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:07:bd:b2:a5:b0:31:7f:e1:7b:4e:32:05:
                    71:9c:3a:4b:6e:e9:d9:b1:92:bb:d1:bf:a2:3a:33:
                    6b:20:56:7b:bf:ff:53:09:b3:f2:fd:c9:58:ab:e8:
                    7f:94:0a:50:37:bd:7f:d2:b6:7e:bd:31:f4:f6:03:
                    e8:1c:49:c7:fc:9b:71:18:8c:40:2c:45:ae:04:18:
                    bc:63:b2:df:7f:ff:c5:2e:b9:91:5e:68:98:ec:fa:
                    80:24:f8:1d:fe:53:f6:f5:f4:72:8e:b8:e7:17:f4:
                    58:c4:20:11:6e:ed:e7:bb:e7:64:f8:5b:99:ac:c1:
                    dd:47:de:78:8b:92:20:ed:28:4e:c0:17:c6:f5:32:
                    3f:23:aa:2c:d9:02:ba:02:c9:12:d6:73:57:3b:19:
                    9c:1d:63:a1:a0:0b:a7:bb:ac:e6:f0:08:35:8d:83:
                    1e:88:c5:94:d9:2a:52:37:f9:ab:69:f4:28:9e:1d:
                    bd:82:2f:83:33:49:61:a4:42:48:75:75:5a:cf:f4:
                    3b:68:f0:0e:9a:68:43:97:b8:dc:70:62:a6:0e:1a:
                    87:ed:a3:36:84:ae:d7:89:54:84:c3:e8:01:d6:64:
                    51:97:e2:40:48:d0:03:66:19:90:8f:fb:66:36:54:
                    b8:ae:28:cd:da:10:89:30:e3:0c:f9:2a:7d:8b:10:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:82:78:9E:49:3E:1D:38:EA:3A:4E:A9:68:C3:C3:C4:35:0E:0F
            X509v3 Authority Key Identifier:
                keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:05:0b:95:92:5a:81:33:52:c1:4f:fd:31:f8:06:fa:20:
         e2:d7:53:77:2b:7f:a7:c5:69:8b:57:9b:78:a0:70:30:7c:36:
         a2:97:ed:4d:45:58:2e:aa:77:a3:37:38:ab:12:e1:01:e1:86:
         1c:bc:6b:65:9c:48:cf:b9:6e:8e:c0:e5:b6:b1:be:88:52:bc:
         94:f7:a7:6b:47:47:d7:75:23:16:cf:37:af:db:ed:ec:66:00:
         ef:a4:d7:d2:5f:a6:9e:20:07:eb:b2:16:e2:77:e1:83:63:31:
         c4:22:56:d5:16:5c:73:a0:34:30:9f:b0:a6:9b:f8:d3:22:cb:
         5d:94:ab:ba:d4:17:8b:3d:69:f5:6e:6a:e8:6f:e3:6f:6c:a0:
         7f:ba:4e:04:fb:df:49:eb:fc:30:97:08:56:2b:cf:1c:bb:19:
         cd:81:f4:83:c0:bb:be:69:58:ab:ac:15:f8:41:a9:35:84:5c:
         77:59:6f:91:07:d9:72:4b:2c:8d:83:d3:b4:c4:26:80:34:49:
         6d:a2:63:11:e1:57:80:4d:3e:38:26:3e:f0:18:d7:09:c3:95:
         29:e2:40:79:e3:85:b0:0a:af:af:0d:d3:34:d2:f8:1a:c2:a7:
         27:64:58:74:b9:a9:2f:ed:d5:3e:e8:3a:e6:fa:47:68:b3:b8:
         31:29:80:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----